Sealing Kubernetes with Confidential Clusters

Learn how to implement confidential Kubernetes clusters through this 17-minute conference talk from DevConf.IN 2026. Discover the security architecture that treats Kubernetes clusters like high-security bank vaults, where nodes require verified attestation similar to physical keys and biometric scans for access. Explore how Trustee functions as an automated security system that validates node credentials, while the Confidential Cluster Operator acts as a bank manager by setting access policies, continuously updating reference values, and ensuring only trusted nodes gain system access. Gain practical insights into building and operating confidential clusters, understanding how attestation mechanisms enforce vault-grade security standards that prevent untrusted nodes from breaching the system.